@bongos/core 1.19.1080 → 1.20.1

package/docs/api/openapi.json

@@ -125,6 +125,10 @@
       "name": "github",
       "description": "Endpoints under `/api/bongos/github`."
     },
+    {
+      "name": "goal-task-relevance",
+      "description": "Endpoints under `/api/bongos/goal-task-relevance`."
+    },
     {
       "name": "goals",
       "description": "Endpoints under `/api/bongos/goals`."
@@ -229,6 +233,10 @@
       "name": "removal-proposals",
       "description": "Endpoints under `/api/bongos/removal-proposals`."
     },
+    {
+      "name": "render-deploy",
+      "description": "Endpoints under `/api/bongos/render-deploy`."
+    },
     {
       "name": "scouting",
       "description": "Endpoints under `/api/bongos/scouting`."
@@ -5598,6 +5606,113 @@
         ]
       }
     },
+    "/goal-task-relevance/pending": {
+      "get": {
+        "operationId": "get_goal_task_relevance_pending",
+        "tags": [
+          "goal-task-relevance"
+        ],
+        "summary": "GET /goal-task-relevance/pending",
+        "description": "task.promote (metic+archon) — the reused review-queue atom.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `task.promote` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/goal-task-relevance.js",
+        "x-permissions": [
+          "task.promote"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetGoalTaskRelevancePendingResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/goal-task-relevance/{id}/decide": {
+      "post": {
+        "operationId": "post_goal_task_relevance_id_decide",
+        "tags": [
+          "goal-task-relevance"
+        ],
+        "summary": "POST /goal-task-relevance/:id/decide",
+        "description": "task.promote — same atom as the read (task.promote's own gate). Hand-written catch (not asyncHandler, per its own header note): maps decideRelevanceFlag's SELF_DECIDE_FORBIDDEN to a named 403.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `task.promote` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/goal-task-relevance.js",
+        "x-permissions": [
+          "task.promote"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostGoalTaskRelevanceIdDecideRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostGoalTaskRelevanceIdDecideResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/goals": {
       "get": {
         "operationId": "get_goals",
@@ -12966,6 +13081,168 @@
         ]
       }
     },
+    "/npm-release/preview": {
+      "get": {
+        "operationId": "get_npm_release_preview",
+        "tags": [
+          "npm-release"
+        ],
+        "summary": "GET /npm-release/preview",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/npm-release/routes/preview.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_npm_release_preview",
+        "tags": [
+          "npm-release"
+        ],
+        "summary": "POST /npm-release/preview",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/npm-release/routes/preview.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostNpmReleasePreviewRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "delete": {
+        "operationId": "delete_npm_release_preview",
+        "tags": [
+          "npm-release"
+        ],
+        "summary": "DELETE /npm-release/preview",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/npm-release/routes/preview.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/npm-release/preview/enter": {
+      "get": {
+        "operationId": "get_npm_release_preview_enter",
+        "tags": [
+          "npm-release"
+        ],
+        "summary": "GET /npm-release/preview/enter",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/npm-release/routes/preview.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/npm-release/preview/exit": {
+      "get": {
+        "operationId": "get_npm_release_preview_exit",
+        "tags": [
+          "npm-release"
+        ],
+        "summary": "GET /npm-release/preview/exit",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/npm-release/routes/preview.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/npm-release/task/{id}": {
       "get": {
         "operationId": "get_npm_release_task_id",
@@ -14645,16 +14922,16 @@
         ]
       }
     },
-    "/provisioning/instances/{id}/repo-private": {
-      "post": {
-        "operationId": "post_provisioning_instances_id_repo_private",
+    "/provisioning/instances/{id}/render": {
+      "get": {
+        "operationId": "get_provisioning_instances_id_render",
         "tags": [
           "provisioning"
         ],
-        "summary": "POST /provisioning/instances/:id/repo-private",
-        "description": "POST /provisioning/instances/:id/repo-private — rank: any authenticated builder, and OWNER ONLY: no archon override, because the runner flips with the owner's stored GitHub token whoever asked (owner decision, task 1004194). 404 for everyone else, so another owner's id is never confirmed. Takes no body. The reply is a receipt — the repository is still public when it is sent; the manage page re-reads GitHub once the intent settles.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "summary": "GET /provisioning/instances/:id/render",
+        "description": "GET /provisioning/instances/:id/render — rank: any authenticated builder, and OWNER ONLY, like the POST (task 1004353). Where the project's app setup on Render stands: the stage, the app's address, the Render links, a failure as one sentence with the answers a Retry re-sends, and the env var NAMES still to set there (task 1004062's manifest — never a value; this platform holds none). Read from the row alone: nothing here calls Render, and there is no key to hold. `app` is null when the project's app has no platform chosen.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
         "x-rank": "any-builder",
-        "x-source": "modules/provisioning/routes/repo-private.js",
+        "x-source": "modules/provisioning/routes/render-standup.js",
         "parameters": [
           {
             "name": "id",
@@ -14666,16 +14943,129 @@
             "description": "Path parameter `id`."
           }
         ],
-        "requestBody": {
-          "required": false,
-          "content": {
-            "application/json": {
-              "schema": {
-                "type": "object",
-                "additionalProperties": true
-              }
-            }
-          },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetProvisioningInstancesIdRenderResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "post": {
+        "operationId": "post_provisioning_instances_id_render",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/render",
+        "description": "POST /provisioning/instances/:id/render — rank: any authenticated builder, and OWNER ONLY: the key is the owner's and so is the account it acts in, so an archon on someone else's project gets the same 404 as a stranger. The reply is a receipt; nothing has happened on Render when it is sent.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/render-standup.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostProvisioningInstancesIdRenderResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/provisioning/instances/{id}/repo-private": {
+      "post": {
+        "operationId": "post_provisioning_instances_id_repo_private",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/instances/:id/repo-private",
+        "description": "POST /provisioning/instances/:id/repo-private — rank: any authenticated builder, and OWNER ONLY: no archon override, because the runner flips with the owner's stored GitHub token whoever asked (owner decision, task 1004194). 404 for everyone else, so another owner's id is never confirmed. Takes no body. The reply is a receipt — the repository is still public when it is sent; the manage page re-reads GitHub once the intent settles.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/repo-private.js",
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "additionalProperties": true
+              }
+            }
+          },
           "x-validated": true
         },
         "responses": {
@@ -14983,6 +15373,48 @@
         "security": []
       }
     },
+    "/provisioning/render/lookup": {
+      "post": {
+        "operationId": "post_provisioning_render_lookup",
+        "tags": [
+          "provisioning"
+        ],
+        "summary": "POST /provisioning/render/lookup",
+        "description": "POST /provisioning/render/lookup — rank: any authenticated builder. What the owner's Render key can see: its workspaces, and the web services in the one they name. The ONLY Render call this process makes (ADR 0348): GET only, the key held for this request and never stored, logged or sent back. POST so the key travels in a body, never a URL.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/provisioning/routes/render-standup.js",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostProvisioningRenderLookupRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/provisioning/slug-available": {
       "get": {
         "operationId": "get_provisioning_slug_available",
@@ -15681,6 +16113,183 @@
         ]
       }
     },
+    "/render-deploy/act": {
+      "post": {
+        "operationId": "post_render_deploy_act",
+        "tags": [
+          "render-deploy"
+        ],
+        "summary": "POST /render-deploy/act",
+        "description": "**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `core.pin.move` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/render-deploy/routes/act.js",
+        "x-permissions": [
+          "core.pin.move"
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PostRenderDeployActRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PostRenderDeployActResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/render-deploy/app": {
+      "get": {
+        "operationId": "get_render_deploy_app",
+        "tags": [
+          "render-deploy"
+        ],
+        "summary": "GET /render-deploy/app",
+        "description": "**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `core.pin.move` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/render-deploy/routes/app.js",
+        "x-permissions": [
+          "core.pin.move"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/GetRenderDeployAppResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "put": {
+        "operationId": "put_render_deploy_app",
+        "tags": [
+          "render-deploy"
+        ],
+        "summary": "PUT /render-deploy/app",
+        "description": "**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `core.pin.move` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/render-deploy/routes/app.js",
+        "x-permissions": [
+          "core.pin.move"
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PutRenderDeployAppRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/PutRenderDeployAppResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/render-deploy/history": {
+      "get": {
+        "operationId": "get_render_deploy_history",
+        "tags": [
+          "render-deploy"
+        ],
+        "summary": "GET /render-deploy/history",
+        "description": "**Rank:** `archon` — Archon only (rank and identity management + the escalation keys — the trust boundary).\n\n**Permissions:** `core.pin.move` (all required).",
+        "x-rank": "archon",
+        "x-source": "modules/render-deploy/routes/history.js",
+        "x-permissions": [
+          "core.pin.move"
+        ],
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/scouting": {
       "get": {
         "operationId": "get_scouting",
@@ -17291,15 +17900,70 @@
               "type": "string"
             },
             "description": "Path parameter `id`."
-          },
-          {
-            "name": "docId",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "type": "string"
-            },
-            "description": "Path parameter `docId`."
+          },
+          {
+            "name": "docId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `docId`."
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Success.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/DeleteSpecialitiesIdDocumentsDocIdResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
+    "/specialities/{id}/offer": {
+      "post": {
+        "operationId": "post_specialities_id_offer",
+        "tags": [
+          "specialities"
+        ],
+        "summary": "POST /specialities/:id/offer",
+        "description": "── offering: a project puts its name behind a speciality ───────────────── OFFERING IS CURATION, NOT OWNERSHIP, so it is gated differently from every other write here. Editing your own speciality is yours; recommending one to everybody on the instance is a claim on their attention and their sessions, which is the same act `project.curate` already governs for featuring a project (metic floor). An owner may therefore edit a speciality they cannot offer, and a curator may offer one they do not own — which is correct: the two decisions are about different things.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `project.curate` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/specialities/routes/specialities.js",
+        "x-permissions": [
+          "project.curate"
+        ],
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            },
+            "description": "Path parameter `id`."
           }
         ],
         "responses": {
@@ -17308,7 +17972,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/DeleteSpecialitiesIdDocumentsDocIdResponse"
+                  "$ref": "#/components/schemas/PostSpecialitiesIdOfferResponse"
                 }
               }
             }
@@ -17333,19 +17997,16 @@
         ]
       }
     },
-    "/specialities/{id}/offer": {
-      "post": {
-        "operationId": "post_specialities_id_offer",
+    "/specialities/{id}/skills": {
+      "put": {
+        "operationId": "put_specialities_id_skills",
         "tags": [
           "specialities"
         ],
-        "summary": "POST /specialities/:id/offer",
-        "description": "── offering: a project puts its name behind a speciality ───────────────── OFFERING IS CURATION, NOT OWNERSHIP, so it is gated differently from every other write here. Editing your own speciality is yours; recommending one to everybody on the instance is a claim on their attention and their sessions, which is the same act `project.curate` already governs for featuring a project (metic floor). An owner may therefore edit a speciality they cannot offer, and a curator may offer one they do not own — which is correct: the two decisions are about different things.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `project.curate` (all required).",
-        "x-rank": "metic+archon",
+        "summary": "PUT /specialities/:id/skills",
+        "description": "PUT /specialities/:id/skills — the caller's ENABLED set for a speciality they hold (task 1004072, ADR 0310 §2). Replaces the set whole: the walkthrough (task 1004073) sends the decisions it collected, so a partial patch would leave a skill switched on that the person was never shown again. Own adoption only, and only while active. Every name must be offered by the speciality AND exist here. rank: any builder, on their own row only.\n\n**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
         "x-source": "modules/specialities/routes/specialities.js",
-        "x-permissions": [
-          "project.curate"
-        ],
         "parameters": [
           {
             "name": "id",
@@ -17357,19 +18018,30 @@
             "description": "Path parameter `id`."
           }
         ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PutSpecialitiesIdSkillsRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
         "responses": {
           "200": {
             "description": "Success.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/PostSpecialitiesIdOfferResponse"
+                  "$ref": "#/components/schemas/PutSpecialitiesIdSkillsResponse"
                 }
               }
             }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
+            "$ref": "#/components/responses/ValidationFailed"
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
@@ -21383,6 +22055,17 @@
           "repos"
         ]
       },
+      "GetGoalTaskRelevancePendingResponse": {
+        "type": "object",
+        "properties": {
+          "flags": {},
+          "count": {}
+        },
+        "required": [
+          "flags",
+          "count"
+        ]
+      },
       "GetGoalsIdConflictsResponse": {
         "type": "object",
         "properties": {
@@ -22186,6 +22869,25 @@
           "reason"
         ]
       },
+      "GetProvisioningInstancesIdRenderResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "app": {},
+          "env_vars": {},
+          "values_held": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "ok",
+          "app",
+          "env_vars",
+          "values_held"
+        ]
+      },
       "GetProvisioningInstancesIdResponse": {
         "type": "object",
         "properties": {
@@ -22437,6 +23139,15 @@
           "count"
         ]
       },
+      "GetRenderDeployAppResponse": {
+        "type": "object",
+        "properties": {
+          "app": {}
+        },
+        "required": [
+          "app"
+        ]
+      },
       "GetScoutingHandleResponse": {
         "type": "object",
         "properties": {
@@ -23449,6 +24160,12 @@
           },
           "sellable": {
             "type": "boolean"
+          },
+          "skills": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
           }
         },
         "additionalProperties": false
@@ -24678,6 +25395,39 @@
           "repo"
         ]
       },
+      "PostGoalTaskRelevanceIdDecideRequest": {
+        "type": "object",
+        "properties": {
+          "decision": {
+            "type": "string",
+            "enum": [
+              "confirmed_gaming",
+              "false_positive"
+            ]
+          },
+          "note": {
+            "type": "string",
+            "maxLength": 2000
+          }
+        },
+        "required": [
+          "decision"
+        ],
+        "additionalProperties": false
+      },
+      "PostGoalTaskRelevanceIdDecideResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "flag": {}
+        },
+        "required": [
+          "ok",
+          "flag"
+        ]
+      },
       "PostGoalsIdArchiveRequest": {
         "type": "object",
         "properties": {
@@ -25538,6 +26288,10 @@
           "notes_md": {
             "type": "string",
             "maxLength": 10000
+          },
+          "success_criterion": {
+            "type": "string",
+            "maxLength": 2000
           }
         },
         "required": [
@@ -26089,6 +26843,19 @@
           "message"
         ]
       },
+      "PostNpmReleasePreviewRequest": {
+        "type": "object",
+        "properties": {
+          "version": {
+            "type": "string",
+            "maxLength": 32
+          }
+        },
+        "required": [
+          "version"
+        ],
+        "additionalProperties": false
+      },
       "PostOverrideRequestsIdDecideRequest": {
         "type": "object",
         "properties": {
@@ -26146,6 +26913,12 @@
           },
           "sellable": {
             "type": "boolean"
+          },
+          "skills": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
           }
         },
         "required": [
@@ -26353,6 +27126,85 @@
           "expires_at"
         ]
       },
+      "PostProvisioningInstancesIdRenderRequest": {
+        "type": "object",
+        "properties": {
+          "key": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "owner_id": {
+            "type": "string",
+            "maxLength": 80
+          },
+          "mode": {
+            "type": "string",
+            "maxLength": 20
+          },
+          "service_id": {
+            "type": "string",
+            "maxLength": 80
+          },
+          "web_plan": {
+            "type": "string",
+            "maxLength": 40
+          },
+          "db_plan": {
+            "type": "string",
+            "maxLength": 40
+          },
+          "region": {
+            "type": "string",
+            "maxLength": 40
+          },
+          "runtime": {
+            "type": "string",
+            "maxLength": 20
+          },
+          "build_command": {
+            "type": "string",
+            "maxLength": 500
+          },
+          "start_command": {
+            "type": "string",
+            "maxLength": 500
+          },
+          "database": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "key",
+          "owner_id",
+          "mode"
+        ],
+        "additionalProperties": false
+      },
+      "PostProvisioningInstancesIdRenderResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "queued": {
+            "type": "boolean"
+          },
+          "action": {},
+          "mode": {},
+          "with_setup": {
+            "type": "boolean"
+          },
+          "message": {}
+        },
+        "required": [
+          "ok",
+          "queued",
+          "action",
+          "mode",
+          "with_setup",
+          "message"
+        ]
+      },
       "PostProvisioningInstancesIdRepoPrivateResponse": {
         "type": "object",
         "properties": {
@@ -26464,6 +27316,23 @@
         ],
         "additionalProperties": false
       },
+      "PostProvisioningRenderLookupRequest": {
+        "type": "object",
+        "properties": {
+          "key": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "owner_id": {
+            "type": "string",
+            "maxLength": 80
+          }
+        },
+        "required": [
+          "key"
+        ],
+        "additionalProperties": false
+      },
       "PostRemovalProposalsIdDecideRequest": {
         "type": "object",
         "properties": {
@@ -26480,6 +27349,39 @@
         ],
         "additionalProperties": false
       },
+      "PostRenderDeployActRequest": {
+        "type": "object",
+        "properties": {
+          "action": {
+            "type": "string",
+            "maxLength": 16
+          },
+          "deployId": {
+            "type": "string",
+            "maxLength": 80
+          },
+          "confirm": {},
+          "expectLiveDeployId": {}
+        },
+        "additionalProperties": false
+      },
+      "PostRenderDeployActResponse": {
+        "type": "object",
+        "properties": {
+          "ok": {
+            "type": "boolean"
+          },
+          "action": {},
+          "started": {},
+          "render": {}
+        },
+        "required": [
+          "ok",
+          "action",
+          "started",
+          "render"
+        ]
+      },
       "PostSearchMarkRequest": {
         "type": "object",
         "properties": {
@@ -26912,6 +27814,12 @@
           },
           "sellable": {
             "type": "boolean"
+          },
+          "skills": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
           }
         },
         "required": [
@@ -27921,6 +28829,53 @@
         ],
         "additionalProperties": false
       },
+      "PutRenderDeployAppRequest": {
+        "type": "object",
+        "properties": {
+          "ownerId": {
+            "type": "string",
+            "maxLength": 80
+          },
+          "serviceId": {
+            "type": "string",
+            "maxLength": 80
+          }
+        },
+        "additionalProperties": false
+      },
+      "PutRenderDeployAppResponse": {
+        "type": "object",
+        "properties": {
+          "app": {}
+        },
+        "required": [
+          "app"
+        ]
+      },
+      "PutSpecialitiesIdSkillsRequest": {
+        "type": "object",
+        "properties": {
+          "enabled_skills": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "enabled_skills"
+        ],
+        "additionalProperties": false
+      },
+      "PutSpecialitiesIdSkillsResponse": {
+        "type": "object",
+        "properties": {
+          "adoption": {}
+        },
+        "required": [
+          "adoption"
+        ]
+      },
       "PutTasksIdDependenciesRequest": {
         "type": "object",
         "properties": {
@@ -28072,9 +29027,9 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 439,
-  "x-schema-count": 471,
+  "x-endpoint-count": 454,
+  "x-schema-count": 486,
   "x-undocumented-bodies": 11,
-  "x-response-schemas": 322,
+  "x-response-schemas": 330,
   "x-generated-by": "scripts/gds/gen-api-docs.js"
 }